Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/2ef17a04-c0c5-3991-89d3-35cea9268db7.roa
File:                     2ef17a04-c0c5-3991-89d3-35cea9268db7.roa (raw, json)
Hash identifier:          bWa/cjy5xcfc8MAYo+rt0x+PIO5ksecaGAJK7OX+LxI=
Subject key identifier:   38:EB:D9:89:A3:8C:25:FC:9C:37:4A:C5:C5:F2:01:52:CB:28:50:19
Certificate issuer:       /CN=f962bda9-74d1-450f-9fe9-e8b75952543b
Certificate serial:       010D0C9F4328584E296F1D685E1D50CC2A7871C0
Authority key identifier: 36:14:15:B6:3C:F9:48:FC:92:2D:2F:89:E5:04:12:0A:EF:F6:8B:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/2ef17a04-c0c5-3991-89d3-35cea9268db7.roa
Signing time:             Sat 13 Jun 2026 21:00:12 +0000
ROA not before:           Sat 13 Jun 2026 21:00:12 +0000
ROA not after:            Fri 11 Sep 2026 21:00:12 +0000
asID:                     40676
IP address blocks:        199.249.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/f962bda9-74d1-450f-9fe9-e8b75952543b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/f962bda9-74d1-450f-9fe9-e8b75952543b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:29:6f:1d:68:5e:1d:50:cc:2a:78:71:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f962bda9-74d1-450f-9fe9-e8b75952543b
        Validity
            Not Before: Jun 13 21:00:12 2026 GMT
            Not After : Sep 11 21:00:12 2026 GMT
        Subject: CN=d0ad40e9-b56a-4697-b4d3-e1f53ee5e7a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bd:df:27:37:62:04:74:d3:8e:97:55:de:e4:
                    c3:86:07:6a:37:35:e7:20:40:98:98:6f:9d:32:b5:
                    d4:7b:89:35:3f:ba:c5:85:ae:dc:f6:3f:0c:23:58:
                    d9:8d:27:36:98:87:2a:c3:ec:0b:7e:e5:70:bd:7c:
                    40:7f:a1:0e:d7:dd:c6:69:fa:f3:46:b0:a8:c7:da:
                    ac:77:2a:9e:ea:03:3d:df:6f:b4:d3:bf:31:a9:d2:
                    08:57:2b:07:f6:89:6b:b3:65:63:c5:a3:f9:c2:ae:
                    23:d2:8f:a7:ec:f8:51:11:05:34:c3:9d:0d:a2:ef:
                    5c:c8:a2:ec:da:11:d1:19:8d:45:b4:67:cd:64:64:
                    85:95:ed:14:bf:53:f6:b6:ea:5d:15:ac:b9:24:9a:
                    34:30:fd:50:e7:a8:3e:91:a8:d4:07:ef:75:57:68:
                    fd:f8:03:e4:53:e4:05:e8:de:6a:f6:e7:6a:05:a0:
                    8d:3c:bc:d7:d9:e3:53:4a:9e:59:d2:96:44:dd:cc:
                    d8:df:f9:9e:78:a2:2a:12:e6:cc:ed:35:52:51:b8:
                    c3:e9:13:1b:97:ec:1b:47:2e:5b:1c:3a:f7:f9:6f:
                    5a:8b:76:12:39:16:a8:04:d9:09:5c:ff:a1:96:bb:
                    4a:69:27:98:42:03:aa:73:c1:18:84:eb:38:4f:32:
                    0b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:EB:D9:89:A3:8C:25:FC:9C:37:4A:C5:C5:F2:01:52:CB:28:50:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/2ef17a04-c0c5-3991-89d3-35cea9268db7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/f962bda9-74d1-450f-9fe9-e8b75952543b.crl

            X509v3 Authority Key Identifier:
                keyid:36:14:15:B6:3C:F9:48:FC:92:2D:2F:89:E5:04:12:0A:EF:F6:8B:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.249.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:7f:d3:33:8e:fc:cf:3e:64:93:fd:60:98:48:1d:ff:59:f1:
         19:21:e8:60:f6:f5:28:2c:fb:8f:ca:7f:75:5e:6d:35:e1:a7:
         9a:a8:d9:f2:1b:d8:e5:67:ea:d8:e7:e5:c2:81:76:b8:3d:89:
         28:f9:47:34:18:a5:8d:4c:8f:58:0a:a4:16:35:44:47:5a:8c:
         65:80:07:67:7e:6c:f3:9c:a4:3c:b0:48:b3:f7:2a:69:e0:ac:
         0b:38:c4:b1:4e:23:b5:de:c0:d7:33:02:05:4f:cf:e8:e5:1c:
         28:f3:22:bf:fa:be:05:3b:d2:a9:d0:f2:3a:b1:60:ef:5d:0b:
         43:ba:7e:ca:74:32:1d:28:f8:8d:4e:28:42:aa:42:e4:17:5f:
         3a:20:e3:bc:9d:93:bb:80:e7:66:c7:06:75:81:2a:cd:c1:ea:
         ad:91:a4:e1:13:45:4e:44:2f:f6:73:bb:b4:a4:a2:30:92:b7:
         48:10:1d:d9:98:c6:91:26:81:e9:d4:91:d6:c2:58:1d:f0:c9:
         3b:ee:a3:3c:52:b0:95:2e:7e:d1:81:fa:05:e2:d2:90:cd:c2:
         d2:7b:85:b8:b4:58:1b:fc:6b:de:98:d5:1f:fa:4b:6c:8d:35:
         5d:1e:ae:af:44:d1:b7:b7:a1:f3:38:48:cc:53:2e:be:ef:e3:
         a2:06:b5:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 15 01:49:54 2026 by rpki-client